HSBC Group

If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

Global Resilience Risk (GRR) is a sub function of Group Risk and Compliance. Its purpose is to make sure HSBC is equipped with a coherent Risk Management Framework, Risk Taxonomy and the tools to enable it to understand and operate within its Global Risk Appetite and effectively manage its overall risk position. It seeks to strengthen the risk culture across the organisation through driving consistent risk management practices across our businesses and functions at global, regional and market level. GRR achieves this through robust oversight and stewardship of the end-to-end processes, risks, and controls ensuring it complies with risk, business and regulatory priorities. Enabling the bank to grow safely, be forward looking, and meet its strategic objectives.

In this role you will:

• Set the strategic direction for Third Party resilience risk oversight for IWPB and HBUK business lines providing authoritative guidance so stakeholders understand the control environment and risk assessments aligned to the scale, complexity and risk profile of operations.
• Advise senior business leaders on the business impact of issues, incidents, and top/emerging risks, influencing decisions on controls, investment, resourcing, and operating model changes to stay within risk appetite.
• Hold risk and control owners accountable for demonstrating control design and operating effectiveness, driving timely remediation and sustainable improvements where gaps are identified.
• Lead horizon scanning across regulatory, technology, and threat landscapes, translating external developments into actionable resilience risk priorities and control expectations.
• Sponsor and enable 1LoD capability to implement, operate, and sustain key mitigating controls, ensuring consistent adoption across entities and markets.
• Provide senior oversight and challenge for GRR and regulatory reporting (e.g., RAS, top & emerging risks, risk profile reporting, RMM, and relevant Board reporting), ensuring quality, consistency, and a clear executive narrative.
• Ensure material resilience risk issues and events are investigated to root cause, with effective corrective actions agreed, tracked, and embedded to prevent recurrence.
• Oversee governance for key controls and material change programmes, ensuring risks are understood, appropriately challenged, and escalated through the right forums.
• Build strong partnerships with Lines of Business, key stakeholders, and 1LoD to drive timely escalation and resolution, with clear ownership, delivery discipline, and transparent outcomes.
• Lead regulatory and audit engagement for resilience risk, ensuring effective management of supervisory expectations and timely closure of audit actions and findings.
• Drive capability uplift through structured training, coaching, and leadership engagement, strengthening resilience risk awareness, accountability, and execution across the organisation.
• Represent Group Resilience Risk (GRR) to key stakeholders across the Bank and, where directed, externally—building trusted partnerships and clear accountability.
• Provide robust oversight, formal input, constructive challenge and guidance to first-line risk and control owners across entities/countries—enabling growth and innovation while keeping risk within appetite.
• Lead and role-model a positive risk culture, including day-to-day management of direct/indirect reports, coaching colleagues across global virtual teams, and supporting recruitment/retention, succession planning, and continuous improvement in engagement, diversity and inclusion.
• Drive relevant transformation programmes by identifying and mitigating risk early, embedding resilience by design from the outset.
• Partner with other oversight functions and Internal/External Audit to maintain a holistic view of the risk profile, including leading delivery and closure of audit points and management self-identified issues.
• Own the alignment and embedding of services delivered through the service catalogue, ensuring consistent implementation across entities, countries and markets.
• Drive efficiencies through continuous improvement and standardisation under the global framework, ensuring timely and proportionate escalation where required.